Skip to content
Open-Source Registry

cargo / annatto / 0.60.0

annatto 0.60.0

processes
829
operations
162K
packages
402
compiler runs
1,452
connections
2
job time
9m 04s
run d9fa29da-d888-4a05-9cab-f0a6bdfe0481 · built 2026-10-06 · complete
20 vulnerabilities

Build behaviournot recorded for this run

Artifact

binary · retained · product
2
ChecksDetections
Build behavior
✓ Network activity—
✓ Cross-process access—
✓ Build file changes—
✓ Build script activity—
✓ Object file origins—
✓ Filesystem writes—
✓ Context collection—
Supply chain
▲ Known vulnerabilities—
▲ Dependency advisories—
✓ Declared and observed dependencies—
Pipeline
✓ Dependency versions across jobs—
✓ Pipeline coverage—

Detections

0

No detections

No abnormal activity detected across 162K flows.

Network

1 peers
  • static.crates.io:8080
    cargo (annatto) via crates.io · build-test
    allowed
Vulnerable dependencies18PackageVersionFixSeverityTitleReach
RUSTSEC-2026-0204crossbeam-epoch0.9.18>=0.9.20highInvalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalidretained
RUSTSEC-2026-0194quick-xml0.28.2, 0.34.0, 0.37.5, 0.38.3>=0.41.0highQuadratic run time when checking a start tag for duplicate attribute namesretained
RUSTSEC-2026-0195quick-xml0.28.2, 0.34.0, 0.37.5, 0.38.3>=0.41.0highUnbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of serviceretained
RUSTSEC-2026-0317sheets-diff1.1.3>=3.2.0highA 512-byte workbook can provoke a multi-gigabyte allocation and abort the processretained
CVE-2026-6654thin-vec0.2.14>=0.2.16highthin-vec: Use-After-Free and Double Free in IntoIter::drop When Element Drop Panicsretained
CVE-2026-50185cmov0.5.3>=0.5.4mediumCmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are setretained
RUSTSEC-2021-0139ansi_term0.12.1none publishedlowansi_term is Unmaintainedretained
RUSTSEC-2026-0190anyhow1.0.99>=1.0.103lowUnsoundness in `Error::downcast_mut()`retained
RUSTSEC-2025-0141bincode1.3.3none publishedlowBincode is unmaintainedretained
GHSA-j39j-6gw9-jw6hgit20.20.2>=0.20.4lowgit2 has potential undefined behavior when dereferencing Buf structretained
RUSTSEC-2026-0183git20.20.2>=0.21.0lowPotential undefined behavior when calling Remote::list()retained
RUSTSEC-2026-0184git20.20.2>=0.21.0lowPotential undefined behavior with Signature from a buffer-created BlameHunkretained
GHSA-rhfx-m35p-ff5jlru0.14.0>=0.16.3low`IterMut` violates Stacked Borrows by invalidating internal pointerretained
RUSTSEC-2026-0253lru0.14.0, 0.17.0>=0.18.2lowPotential use-after-free due to lack of panic safety in `LruCache::pop()`retained
RUSTSEC-2026-0186memmap20.5.10, 0.9.7>=0.9.11lowUnchecked pointer offset in crate `memmap2`retained
RUSTSEC-2025-0119number_prefix0.4.0none publishedlownumber_prefix crate is unmaintainedretained
GHSA-cq8v-f236-94qcrand0.9.2>=0.9.3lowRand is unsound with a custom logger using rand::rng()retained
CVE-2025-58160tracing-subscriber0.3.19>=0.3.20lowTracing logging user input may result in poisoning logs with ANSI escape sequencesretained

Raw data

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

Dependencies

459 packages, 0 with a build script that ran, 0 doing more than compiling
PackageVersionUsageBuild behaviour
adler22.0.1linked
aes0.8.4linked
aes0.9.0linked
ahash0.8.12linked
aho-corasick1.1.3linked
allocator-api20.2.21linked
android_system_properties0.1.5platform_gated
ansi-str0.8.0linked
ansi_term direct0.12.1linked
ansitok0.2.0linked
anstream0.6.20linked
anstyle1.0.11linked
anstyle-parse0.2.7linked
anstyle-query1.1.4linked
anstyle-wincon3.0.10platform_gated
anyhow direct1.0.99linked
arbitrary1.4.2platform_gated
arrayvec0.5.2linked
ascii-canvas4.0.0linked
assert_cmd2.1.0unrelated
atoi_simd0.16.1linked
auto_enums0.8.7linked
autocfg1.5.0buildtime_only
base640.22.1linked
bimap direct0.6.3linked
binary-layout2.1.0linked
binary-layout4.0.2linked
bincode1.3.3linked
bit-set0.8.0linked
bit-set0.9.1linked
bit-vec0.8.0linked
bit-vec0.9.1linked
bitflags2.9.2linked
block-buffer0.10.4linked
block-buffer0.12.0linked
block-padding0.3.3linked
boolean_expression0.4.4linked
bstr1.12.0unrelated
bumpalo3.19.0linked
bytecount0.6.9linked
byteorder1.5.0linked
bzip20.6.1linked
calamine0.31.0linked
cbc0.1.2linked
cc1.2.33linked
cfb0.10.0linked
cfg-if1.0.3linked
chacha200.10.0linked
chrono direct0.4.42linked
cipher0.4.4linked
cipher0.5.1linked
clap direct4.5.45linked
clap_builder4.5.44linked
clap_derive4.5.45linked
clap_lex0.7.5linked
clru0.6.2linked
cmov0.5.3linked
codepage0.1.2linked
colorchoice1.0.4linked
console direct0.15.11linked
const-fnv1a-hash1.1.0linked
const-oid0.10.2linked
constant_time_eq0.4.2linked
convert_case0.7.1linked
coolor1.1.0linked
core-foundation-sys0.8.7platform_gated
cpubits0.1.0linked
cpufeatures0.2.17linked
cpufeatures0.3.0linked
crc3.3.0linked
crc-catalog2.4.0linked
crc32fast1.5.0linked
crokey1.2.0linked
crokey-proc_macros1.2.0linked
crossbeam0.8.4linked
crossbeam-channel0.5.15linked
crossbeam-deque0.8.6linked
crossbeam-epoch0.9.18linked
crossbeam-queue0.3.12linked
crossbeam-utils0.8.21linked
crossterm0.29.0linked
crossterm_winapi0.9.1platform_gated
crypto-common0.1.6linked
crypto-common0.2.1linked
csv direct1.3.1linked
csv-core0.1.12linked
ctutils0.4.2linked
debug_unsafe0.1.3linked
deflate640.1.12linked
deranged0.5.5linked
derive_arbitrary1.4.2buildtime_only
derive_more2.0.1linked
derive_more-impl2.0.1linked
derive_utils0.15.0linked
diff0.1.13unrelated
difflib0.4.0unrelated
digest0.10.7linked
digest0.11.2linked
displaydoc0.2.5linked
doc-comment0.3.3linked
document-features0.2.11linked
dot-generator0.2.0linked
dot-structures0.1.2linked
either1.18.0linked
ena0.14.3linked
encode_unicode1.0.0platform_gated
encoding_rs direct0.8.35linked
encoding_rs_io direct0.1.7linked
equivalent1.0.2linked
errno0.3.13platform_gated
facet direct0.46.0linked
facet-core0.46.0linked
facet-macro-parse0.46.0linked
facet-macro-types0.46.0linked
facet-macros0.46.0linked
facet-macros-impl0.46.0linked
facet-path0.46.0linked
facet-reflect direct0.46.0linked
fancy-regex0.14.0linked
fast-float20.2.3linked
fastrand2.3.0linked
file_diff1.0.0linked
fixedbitset0.5.7linked
flate21.1.2linked
fnv1.0.7linked
foldhash0.1.5linked
foldhash0.2.0linked
form_urlencoded1.2.1linked
fs20.4.3linked
generic-array0.14.7linked
getrandom0.2.16linked
getrandom0.3.3linked
getrandom0.4.2linked
git2 direct0.20.2linked
glob direct0.3.3linked
graphannis direct4.2.0linked
graphannis-core direct4.2.0linked
graphviz-rust direct0.9.7linked
hashbrown0.15.5linked
hashbrown0.16.1feature_gated
hashbrown0.17.0linked
heck0.4.1linked
heck0.5.0linked
hmac0.12.1linked
hmac0.13.0linked
html_parser0.7.0linked
hybrid-array0.4.11linked
iana-time-zone0.1.63linked
iana-time-zone-haiku0.1.2platform_gated
icu_collections2.3.0linked
icu_locale_core2.3.0linked
icu_normalizer2.3.0linked
icu_normalizer_data2.3.0linked
icu_properties2.3.0linked
icu_properties_data2.3.0linked
icu_provider2.3.1linked
id-arena2.3.0buildtime_only
iddqd0.3.18feature_gated
idna1.0.3linked
idna_adapter1.2.1linked
imagesize0.14.0linked
impls1.0.3linked
indexmap2.14.0linked
indicatif direct0.17.11linked
inout0.1.4linked
inout0.2.2linked
insta1.43.1unrelated
integer-encoding3.0.4linked
into-attr0.1.1linked
into-attr-derive0.2.1linked
is_terminal_polyfill1.70.1linked
itertools direct0.12.1linked
itertools0.14.0linked
itertools0.9.0linked
itoa1.0.15linked
jobserver0.1.33linked
js-sys0.3.77platform_gated
keccak0.1.6linked
lalrpop0.23.1linked
lalrpop-util0.23.1linked
lazy-regex3.4.1linked
lazy-regex-proc_macros3.4.1linked
lazy_static direct1.5.0linked
ld-linux-x86-64.so.2linked
leb128fmt0.1.0buildtime_only
libbz2-rs-sys0.2.3linked
libc0.2.175linked
libc.so.6linked
libgcc_s.so.1linked
libgit2-sys0.18.2+1.9.1linked
libm.so.6linked
libmvec.so.1linked
libz-rs-sys0.5.2linked
libz-sys1.1.22linked
linked-hash-map direct0.5.6linked
linked_hash_set direct0.1.5linked
linux-raw-sys0.9.4linked
litemap0.8.0linked
litrs0.4.2linked
lock_api0.4.13linked
log direct0.4.29linked
lru direct0.14.0linked
lru0.17.0linked
lzma-rust20.16.2linked
matchers0.1.0linked
md-50.10.6linked
memchr2.8.3linked
memmap20.5.10linked
memmap20.9.7linked
memory-stats1.2.0linked
minimad0.13.1linked
miniz_oxide0.8.9linked
mio1.0.4linked
mutants0.0.3linked
new_debug_unreachable1.0.6linked
nom7.1.3linked
nonzero direct0.2.0linked
nonzero_lit0.1.2linked
normpath direct1.3.0linked
nu-ansi-term0.46.0linked
num-conv0.2.1linked
num-integer0.1.46linked
num-traits0.2.19linked
number_prefix0.4.0linked
once_cell1.21.3linked
once_cell_polyfill1.70.1platform_gated
ordered-float direct4.6.0linked
overload0.1.1linked
page_size0.6.0linked
papergrid0.11.0linked
parking_lot0.12.4linked
parking_lot_core0.9.11linked
paste1.0.15linked
pathdiff direct0.2.3linked
pbkdf20.13.0linked
percent-encoding direct2.3.1linked
pest direct2.8.1linked
pest_derive direct2.8.1linked
pest_generator2.8.1linked
pest_meta2.8.1linked
petgraph0.8.3linked
phf_shared0.13.1linked
pin-project-lite0.2.16linked
pkg-config0.3.32linked
portable-atomic1.11.1linked
potential_utf0.1.6linked
powerfmt0.2.0linked
ppmd-rust1.4.0linked
ppv-lite860.2.21linked
precomputed-hash0.1.1linked
predicates3.1.3unrelated
predicates-core1.0.9unrelated
predicates-tree1.0.12unrelated
pretty_assertions1.4.1unrelated
prettyplease0.2.37buildtime_only
proc-macro-error1.0.4linked
proc-macro-error-attr1.0.4linked
proc-macro21.0.101linked
quick-xml0.28.2linked
quick-xml direct0.34.0linked
quick-xml0.37.5linked
quick-xml0.38.3linked
quote1.0.47linked
rand0.10.1linked
rand0.9.2linked
rand_chacha0.9.0linked
rand_core0.10.1linked
rand_core0.9.3linked
rayon direct1.11.0linked
rayon-core1.13.0linked
redox_syscall0.5.17platform_gated
regex direct1.12.2linked
regex-automata0.1.10linked
regex-automata0.4.13linked
regex-syntax0.6.29linked
regex-syntax0.8.5linked
roxmltree direct0.20.0linked
rustc-hash2.1.2linked
rustix1.0.8linked
rustversion1.0.22buildtime_only
ryu1.0.20linked
same-file1.0.6linked
scopeguard1.2.0linked
semver1.0.28buildtime_only
seqdiff0.3.0linked
serde direct1.0.228linked
serde-xml-rs direct0.8.2linked
serde_bytes0.11.17linked
serde_core1.0.228linked
serde_derive direct1.0.228linked
serde_json direct1.0.143linked
serde_spanned0.6.9linked
serde_spanned1.1.1linked
sha10.11.0linked
sha20.10.9linked
sha30.10.9linked
sharded-slab0.1.7linked
sheets-diff direct1.1.3linked
shlex1.3.0linked
signal-hook0.3.18linked
signal-hook-mio0.2.4linked
signal-hook-registry1.4.6linked
simd-adler320.3.7linked
similar direct2.7.0linked
siphasher1.0.1linked
smallvec1.15.1linked
smallvec2.0.0-alpha.12linked
snap1.1.1linked
sstable0.11.1linked
stable_deref_trait1.2.0linked
strict0.2.0linked
string_cache0.9.0linked
strsim0.11.1linked
strum0.28.0linked
strum_macros0.28.0linked
subtle2.6.1linked
syn1.0.109linked
syn2.0.106linked
syn3.0.6linked
synstructure0.13.2linked
synstructure0.14.0linked
sys-info0.9.1linked
tabled direct0.15.0linked
tabled_derive0.7.0linked
tempfile direct3.21.0linked
term1.2.1linked
termimad direct0.30.1linked
termtree0.5.1unrelated
text-splitter direct0.6.3linked
thin-vec0.2.14linked
thiserror1.0.69linked
thiserror direct2.0.18linked
thiserror-impl1.0.69linked
thiserror-impl2.0.18linked
thousands0.2.0linked
thread_local1.1.9linked
time direct0.3.47linked
time-core0.1.8linked
tinystr0.8.4linked
tinyvec1.10.0linked
tinyvec_macros0.1.1linked
tokenizations direct0.4.2linked
toml0.5.11unrelated
toml direct0.8.23linked
toml1.1.2+spec-1.1.0linked
toml_datetime0.6.11linked
toml_datetime1.1.1+spec-1.1.0linked
toml_edit0.22.27linked
toml_parser1.1.2+spec-1.1.0linked
toml_write0.1.2linked
toml_writer1.1.1+spec-1.1.0linked
tracing0.1.41linked
tracing-core0.1.34linked
tracing-log0.2.0linked
tracing-subscriber direct0.3.19linked
transient-btree-index0.5.1linked
typed-path0.12.3linked
typenum1.20.0linked
ucd-trie0.1.7linked
umya-spreadsheet direct2.3.3linked
unicode-ident1.0.18linked
unicode-normalization0.1.24linked
unicode-segmentation1.12.0linked
unicode-width0.1.14linked
unicode-width0.2.1linked
unicode-xid0.2.6linked
unsynn0.3.0linked
url direct2.5.4linked
utf8_iter1.0.4linked
utf8parse0.2.2linked
uuid1.18.0linked
valuable0.1.1feature_gated
vcpkg0.2.15buildtime_only
version_check0.9.5buildtime_only
vte0.10.1linked
vte_generate_state_changes0.1.2linked
wait-timeout0.2.1unrelated
walkdir2.5.0linked
wasip21.0.3+wasi-0.2.9platform_gated
wasip30.4.0+wasi-0.3.0-rc-2026-01-06platform_gated
wasm-bindgen0.2.100platform_gated
wasm-bindgen-backend0.2.100buildtime_only
wasm-bindgen-macro0.2.100buildtime_only
wasm-bindgen-macro-support0.2.100buildtime_only
wasm-bindgen-shared0.2.100buildtime_only
wasm-encoder0.244.0buildtime_only
wasm-metadata0.244.0buildtime_only
wasmparser0.244.0buildtime_only
web-time1.1.0platform_gated
winapi0.3.9platform_gated
winapi-i686-pc-windows-gnu0.4.0platform_gated
winapi-util0.1.10buildtime_only
winapi-x86_64-pc-windows-gnu0.4.0platform_gated
windows-core0.61.2platform_gated
windows-implement0.60.0buildtime_only
windows-interface0.59.1buildtime_only
windows-result0.3.4platform_gated
windows-strings0.4.2platform_gated
winnow0.7.12linked
winnow1.0.2linked
wit-bindgen-core0.51.0buildtime_only
wit-bindgen-rt0.39.0platform_gated
wit-bindgen-rust0.51.0buildtime_only
wit-bindgen-rust-macro0.51.0buildtime_only
wit-component0.244.0buildtime_only
wit-parser0.244.0buildtime_only
writeable0.6.4linked
xml1.4.0linked
xml-rs direct0.8.27linked
yansi1.0.1unrelated
yoke0.8.3linked
yoke-derive0.8.4linked
zerocopy0.8.26linked
zerocopy-derive0.8.26buildtime_only
zerofrom0.1.6linked
zerofrom-derive0.1.6linked
zeroize1.8.2linked
zerotrie0.2.5linked
zerovec0.11.8linked
zerovec-derive0.11.6linked
zip2.4.2linked
zip4.6.1linked
zip direct8.6.0linked
zlib-rs0.5.2linked
zopfli0.8.3linked
zstd0.13.3linked
zstd-safe7.2.4linked
zstd-sys2.0.15+zstd.1.5.7linked
minimal-lexical0.2.1dead
r-efi5.3.0unverified
r-efi6.0.0unverified
rust_xlsxwriter direct0.90.2dead
wasi0.11.1+wasi-snapshot-preview1unverified
wasi0.14.2+wasi-0.2.4unverified
windows-link0.1.3unverified
windows-link0.2.1unverified
windows-sys0.52.0unverified
windows-sys0.59.0unverified
windows-sys0.60.2unverified
windows-targets0.52.6unverified
windows-targets0.53.3unverified
windows_aarch64_gnullvm0.52.6unverified
windows_aarch64_gnullvm0.53.0unverified
windows_aarch64_msvc0.52.6unverified
windows_aarch64_msvc0.53.0unverified
windows_i686_gnu0.52.6unverified
windows_i686_gnu0.53.0unverified
windows_i686_gnullvm0.52.6unverified
windows_i686_gnullvm0.53.0unverified
windows_i686_msvc0.52.6unverified
windows_i686_msvc0.53.0unverified
windows_x86_64_gnu0.52.6unverified
windows_x86_64_gnu0.53.0unverified
windows_x86_64_gnullvm0.52.6unverified
windows_x86_64_gnullvm0.53.0unverified
windows_x86_64_msvc0.52.6unverified
windows_x86_64_msvc0.53.0unverified
wit-bindgen0.51.0unverified
wit-bindgen0.57.1unverified

1 of 1 jobs captured: build-test success · Generated 2026-10-06 · tarp 0.1.0+20261006141426-gae10636542ce · run d9fa29da-d888-4a05-9cab-f0a6bdfe0481